Privacy Policy

Effective — 29 May 2025

At OneWord AI Inc. (“Oneword,” “we,” “our,” “us”) we respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, and share information when you interact with our website, mobile apps, and related services (the “Services”).

1. Information We Collect

• **Account data** – name, email, password hash, subscription status.
• **Content data** – text, documents you upload or generate.
• **Usage data** – reading speed, feature interactions, device & browser type, IP address, cookies, and analytics events.
• **Payment data** – handled by Stripe; we store transaction IDs only.

2. Legal Basis for Processing (EU/UK Users)

Under the General Data Protection Regulation (GDPR) and UK Data Protection Act, we process your personal data based on the following legal grounds:

• Contract Performance (Article 6(1)(b)): Account management, service delivery, payment processing, and core reading functionality.
• Legitimate Interest (Article 6(1)(f)): Service improvement, analytics, security monitoring, and technical optimization.
• Consent (Article 6(1)(a)): Marketing communications, optional AI features, and non-essential cookies.
• Legal Obligation (Article 6(1)(c)): Tax compliance, regulatory reporting, and law enforcement cooperation.

You may withdraw consent or object to legitimate interest processing at any time by contacting readwithoneword@gmail.com We will make reasonable efforts to honor your requests, though technical limitations may affect immediate implementation.

3. How We Use Information

• Provide, maintain, and improve the Services.
• Personalize reading speed, content recommendations, and analytics for you.
• Process payments and manage subscriptions.
• Communicate updates, security alerts, and marketing (you may opt out).
• Comply with legal obligations and enforce our Terms.

4. AI Processing and Automated Decision-Making

We use artificial intelligence to enhance your reading experience. Here's what you should know:

• AI Features: We use AI to generate summaries, create quizzes, simplify text, generate mindmaps, and provide reading recommendations.
• Training Data: We do not use your uploaded documents or personal content to train our AI models without your explicit consent.
• Personalization: We analyze your reading patterns to personalize speed settings and content recommendations. This processing is based on legitimate interest and you may opt out.
• Your Rights: Under GDPR Article 22, you have the right to request human review of automated decisions that significantly affect you.

To opt out of AI personalization or request human review, contact readwithoneword@gmail.com Please note that opt-out mechanisms are currently being developed and may not be immediately available for all features.

5. Sharing & Disclosure

We do not sell your personal data. We share it:

• With service providers (cloud hosting, analytics, payment processors) under strict data-processing agreements. View our full Subprocessor List.
• With authorities when legally required.
• In a merger or acquisition, with notice to you and continued protection of your data.

6. International Data Transfers

Your data may be processed in countries outside the EU/UK, including the United States. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• UK International Data Transfer Agreement (IDTA) for UK data.
• Adequacy decisions where available.
• Regular transfer impact assessments to ensure ongoing protection.

For more information about our transfer safeguards, contact readwithoneword@gmail.com

7. Cookies & Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, and analyze traffic. You can control cookies via browser settings.

8. Data Retention

We retain personal data for the following periods:

• Account data: Duration of your account plus 30 days after deletion.
• Content data: Until you delete it, plus 90 days in backups for recovery purposes.
• Usage analytics: 24 months from collection.
• Payment records: 7 years for tax and accounting requirements.
• Support communications: 3 years from last interaction.

You can request account deletion and data removal by contacting readwithoneword@gmail.com While we aim to process deletion requests promptly, technical limitations may affect immediate removal timelines. Some data may persist in backups for the specified retention periods.

9. Reading Analytics and Biometric Considerations

We collect reading speed and comprehension metrics to personalize your experience. Important clarifications:

• Reading metrics are used solely for personalization and progress tracking.
• We do not consider reading patterns to be biometric identifiers under applicable laws.
• If any jurisdiction interprets reading data as biometric information, we process it solely for the functional purpose of improving your reading experience.
• You may request to opt out of detailed analytics collection by contacting readwithoneword@gmail.com Technical implementation of granular opt-out controls is in development.

10. Security

We use industry-standard encryption in transit and at rest, regular security audits, and least-privilege access controls to protect your data.

11. Your Privacy Rights

Depending on your jurisdiction you may have the right to access, correct, delete, or port your personal data and object to certain processing. Submit requests via readwithoneword@gmail.com.

11a. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the personal data we collect, use, and share
• Right to Delete: Request deletion of your personal data (subject to legal exceptions)
• Right to Opt-Out: We do not sell personal data, but you can opt out if we ever do
• Right to Non-Discrimination: We will not discriminate against you for exercising these rights

Categories of Personal Information: We collect identifiers (name, email), payment information, usage data, and content you upload. We share technical data with service providers but do not sell personal information.

12. Children's Privacy

We welcome users of all ages and are committed to protecting children's privacy. For users under 13 years old, we require verifiable parental consent before collecting personal information. We do not knowingly collect personal information from children under 13 without such consent.

If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete such information promptly. Parents and guardians can contact readwithoneword@gmail.com to review, modify, or delete their child's information.

For users between 13-17 years old, we may require parental consent where mandated by applicable law. Parents maintain the right to review and control their minor children's use of our Services.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or in-app notice.

14. Contact Us

Questions? Email readwithoneword@gmail.com.